Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
cloudera cloudera manager vulnerabilities and exploits
(subscribe to this query)
5.4
CVSSv3
CVE-2016-9271
Cloudera Manager 5.7.x prior to 5.7.6, 5.8.x prior to 5.8.4, and 5.9.x prior to 5.9.1 allows XSS in the help search feature.
Cloudera Cloudera Manager
Cloudera Cloudera Manager 5.9.0
6.5
CVSSv3
CVE-2018-10815
An issue exists in Cloudera Manager prior to 5.13.4, 5.14.x prior to 5.14.4, and 5.15.x prior to 5.15.1. A read-only user can access sensitive cluster information.
Cloudera Cloudera Manager
5.4
CVSSv3
CVE-2015-4457
Multiple cross-site scripting (XSS) vulnerabilities in the Cloudera Manager UI prior to 5.4.3 allow remote authenticated users to inject arbitrary web script or HTML using unspecified vectors.
Cloudera Cloudera Manager
6.1
CVSSv3
CVE-2021-29243
Cloudera Manager 5.x, 6.x, 7.1.x, 7.2.x, and 7.3.x allows XSS.
Cloudera Cloudera Manager
6.1
CVSSv3
CVE-2018-15913
An issue exists in Cloudera Manager 5.x up to and including 5.15.0. One type of page in Cloudera Manager uses a 'returnUrl' parameter to redirect the user to another page in Cloudera Manager once a wizard is completed. The validity of this parameter was not checked. As ...
Cloudera Cloudera Manager
6.1
CVSSv3
CVE-2021-32482
Cloudera Manager 5.x, 6.x, 7.1.x, 7.2.x, and 7.3.x allows XSS via the path parameter.
Cloudera Cloudera Manager
8.1
CVSSv3
CVE-2018-11744
Cloudera Manager up to and including 5.15 has Incorrect Access Control.
Cloudera Cloudera Manager
6.5
CVSSv3
CVE-2016-3192
Cloudera Manager 5.x prior to 5.7.1 places Sensitive Data in cleartext Readable Files.
Cloudera Cloudera Manager
7.5
CVSSv3
CVE-2015-6495
There is Sensitive Information in Cloudera Manager prior to 5.4.6 Diagnostic Support Bundles.
Cloudera Cloudera Manager
5.3
CVSSv3
CVE-2021-32483
Cloudera Manager 7.2.4 has Incorrect Access Control, allowing Escalation of Privileges to view the restricted Dashboard.
Cloudera Cloudera Manager 7.2.4
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-4671
unauthorized
CVE-2024-4776
CVE-2024-3407
CVE-2024-26026
CVE-2024-32888
wireless
CVE-2024-4656
template injection
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
NEXT »